Privacy Policy

Last updated 26 June 2026

1. Who we are

Iguanify Ltd, registered in England & Wales (company No. 17304816), 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, is the data controller for the Iguanify service. For any privacy question or request, email support@iguanify.com.

2. What we collect

• Account data: your name, email address and a salted hash of your password. We never store the password itself.
• Production data: the prompts and parameters you submit, the jobs they create, and the outputs we deliver to you.
• Usage data: credit balance and transaction history, and standard server logs (IP address, timestamps) kept for security and rate limiting.

3. What we use it for

• Running the service: generating your jobs, delivering outputs, maintaining your balance.
• Security: session management, fraud and abuse prevention, rate limiting.
• Service emails: delivery notifications and material changes to terms or pricing. No marketing without separate consent.
• Conversion measurement: we record key service events (account created, show created, payment completed) server-side, first-party and without cookies, to measure that the product works.

4. What we don't do

• We don't sell your data.
• We don't use your prompts or outputs to advertise to anyone else.
• We don't load advertising or analytics trackers until you consent. Google Ads, the Meta (Facebook) Pixel, and our PostHog product analytics (including masked session replay) run only after you press Accept in the cookie banner; decline and they stay off.

5. Where your data lives

Account and job data are stored on our production infrastructure in the UK/EU. Generated media may be processed by the model providers in our pipeline strictly to produce your outputs.

If you choose to contact us on WhatsApp, your phone number, profile name and messages are processed by WhatsApp (Meta) under their own privacy policy; we only use them to reply to you.

6. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, and you can close your account at any time, and we'll action it within 30 days — email support@iguanify.com. You can also complain to the ICO (ico.org.uk).

7. Cookies

One essential cookie: sid, the session that keeps you signed in. HttpOnly, same-site, deleted when you sign out — always on, no consent needed.

Advertising and analytics cookies (Google Ads via gtag.js, the Meta/Facebook Pixel, and PostHog product analytics) are optional and off by default. We use Google Consent Mode v2, and the Meta Pixel and PostHog are held to the same choice, so they are set only after you press Accept in the cookie banner; they measure the performance of our ads and how the site is used. PostHog (hosted in the EU) may also record a masked replay of your session — text you type, such as emails and prompts, is masked and never captured. Decline, or simply don't accept, and none are set. You can change your mind by clearing the site's cookies and storage.